IRS Re-Enables ‘Get Transcript’ Feature
Summary: The IRS re-enabled its online "Get Transcript" service after disabling it in May 2015 when tax refund fraudsters used it to steal taxpayer data, with the estimated victim count rising from 100,000 to 330,000 and then to about 724,000. The new version requires an SSN, a financial account number and a mobile phone number verified through Equifax, plus knowledge-based authentication questions.
Why it matters: The agency's own victim estimate more than septupled across three revisions, and tax fraud victim Mike Kasper estimates a thief's cost to defeat the new checks rose only from about $10 to roughly $30 - by opening phone or credit card accounts in the victim's name.
Read the original at Krebs on Security ↗
- Topics
- Identity & Access Management
- Related
- FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’ Cyber Risks · Nov 13, 2026Connect Wise Cloud Backup application abused in cross-tenant token sweep Cyber Risks · Oct 19, 2026Sponsored: Specter Ops on the impact of AI agents on Blood Hound Cyber Risks · Sep 20, 2026